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AMENDMENTS TO THE CLAIMS 
This listing of claims will replace all prior versions and listings of claims in the 
above-identified application: 

1. (currently amended): An apparatus for providing a fail-operational global time 
reference for a redundant synchronous data bus system including a first primary data bus, 
a second primary data bus, a first redundant data bus, and a second redundant data bus, 
the apparatus comprising: 

a first plurality of timing servers cross-coupled to said first data buses and 
configured to receive timing synchronization signals from said second primary data bus; 

a second plurality of timing servers cross-coupled to said second data buses and 
configured to receive timing synchronization signals from said first primary data bus a 
each of the first and second plurality of timing servers including a counter ; and 

a unique constant stored in each timing server, 

wherein each said timing server of said first and second pluralities of timing 
servers is configured to independently and automatically execute a selection protocol 
responsive to a failure of a timing master to select one timing server from among the first 
and second pluralities of timing servers to be a replacement timing master based upon 
synchronization signals received from at least one timing server of said first and second 
pluralities of timing servers and upon a relationship among said unique constants stored 
in said timing servers* 

wherein each said timing server is configured to transmit, receive, and monitor 
synchronization signals from each of said first and second pluralities of timing servers, 
each said counter is responsive to the failure of the timing master to initiate counting 
from a starting point to count toward each respective stored unique constant and each 
said timing server is farther configured to transmit a master timing s ynchronization signal 
when said counter in said timing server has completed counting to said unique constant 
stored in said timing server . . 

2-5 > (canceled). 
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6. (original): The apparatus of claim 1, wherein each said timing server is 
configured to self test its timing synchronization signal. 

7. (original): The apparatus of claim 1, wherein each said timing server is 
configured to test the timing synchronization signals of other timing servers. 

8. (currently amended): A timing server for providing a fail-operational global 
time service for a synchronous data bus system interconnecting at least one plurality of 
timing servers coupled to at least one data bus in said synchronous data bus system, the 
timing server comprising: 

a first module configured to. transmit synchronization signals and to receive and 
monitor synchronization signals from each timing server of said at least one plurality of 
timing servers; 

a second module configured to store a unique constant; and 
a third module configured to independently and automatically select one or more 
timing servers from among the at least one plurality of timing servers to be timing master 
mast e rs based at least partially iq>on a relationship among unique constants associated 
with each timing server and upon said synchronization signals received from one or more 
of said timing servers of said at least one plurality of timing server s, the third module 
further configured to include a counter, and in response to a monitored failure of the 
timing master, to initiate counting from a starting point toward the unique constant the 
third module initiating the transmission of a master timing synchronization signal when 
the counter has completed counting to the unique constant . 

9. (original): The timing server of claim 8, wherein said third module is further 
configured to synchronize to said synchronization signal from said timing master upon 
first reception of said synchronization signal from said timing master. 
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10. (currently amended): The timing server of claim 8, wherein said third module 
is Anther configured to transmit [[a]] the timing master synchronization signal responsive 
to receiving timing master synchronization signals from two or more other timing servers 
for more than a predetermined period of time. 

11. (currently amended): An apparatus for providing a fail-operational global 
time service for a synchronous data bus system interconnecting at least one plurality of 
timing servers coupled to at least one data bus in said synchronous data bus system, 
wherein: 

each said timing server of the at least one plurality of timing servers is initially 
configured to transmit synchronization signals and to receive and monitor 
synchronization signals from each timing server of said at least one plurality of timing 
servers; 

each said timing server of the at least one plurality of timing servers includes a 
counter and i s configured to store a unique constant; and 

each said timing server of the at least one plurality of timing servers is configured 
to independently and automatically select one or more timing servers from among the at 
least one plurality of timing servers to be timing masters based upon said synchronization 
signals received from one or more of said timing servers of said at least one plurality of 
timing servers and based upon a relationship among said unique constants stored in each 
timing server^ 

wherein each said timing server of the at least one plurality of timing servers is 
further configured to: 

count toward a unique predetermined constant in response to detection of a failure 
of a timing master synchronization signal to which said each timing server is 
synchronized: 

if no other timing master synchronization signal is received before said counting 
reaches said unique predete rmined constan t, transmitting a replacement timing master 
synchronization signal; and 
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if the other timing master synchronization signal is received before said counting 
reaches said unique predetermined value, synchronizing to the other timing master 
synchronization signal . 

12. (original): The apparatus of claim 1 1, wherein each said timing server of the 
at least one plurality of timing servers is further configured to synchronize to said 
synchronization signal from said timing master upon first reception of said 
synchronization signal from said timing master. 

13. (currently amended): The apparatus of claim 11, wherein each said timing 
server of the at least one plurality of timing servers is further configured to transmit [[a]] 
the replacement timing master synchronization signal responsive to receiving timing 
master synchronization signals from two or more other timing servers for more than a ■ 
predetermined period of time. 

14. (canceled). 

15. (currently amended): A method of selecting a timing master in a fail- 
operational global time reference in a synchronous data bus system having at least one 
plurality of timing servers coupled to at least one data bus of said synchronous data bus 
system, one said timing server acting as a timing master, the method comprising the steps 
of, in each operable timing server of the at least one plurality of timing servers: 

detecting a failure a synchronization signal o f the timing master synchronization 

signal ; 

counting toward a unique predetermined constant in response to detection of the 
failure of the timing master synchronization signal; 

if no other timing master synchronization signal is received before said counting 
reaches said unique predetermined constant, transmitting a replacement timing master 
synchronization signal; and 
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if IM] the other timing master synchronization signal is received before said ^ 
counting reaches said unique predetermined value, synchronizing to said received other 
timing master synchronization signal. 



16. (currently amended): The method of claim 15, further comprising a timing 
responding to reception of [[a]] the other timing master synchronization signal 

from another timing server by th e st e p of ceasing to produce [[a]] the replacement timing 
master synchronization signal after a predetermined period of time. 

17. (currently amended): The method of claim 15, further comprising the step of 
transmitting [[a]] the replacement timing master synchronization signal in response to 
receiving timing master synchronization signals from two or more timing servers for a 
period longer than a predetermined period. 

18. (original): The method of claim 1 5, further comprising the step of performing 
one or more tests on synchronization signals received from each timing server of the 
plurality of timing servers and adapting said one or more tests responsive to one or more 
failed tests. 



19. (currently amended): A method executed in a local timing server coupled to 
at least one data bus, the method comprising the steps of: 

monitoring a first timing master synchronization signal from a first remote timing 

server, 

counting toward a unique constant in response to detecting a failure of said timing 
master synchronization signal in said monitoring step; and 

synchronizing to a second remote timing server as timing master if a second 
master timing master synchronization signal is received from said second remote timing 
server during the counting step and otherwise transmitting a replacement timing master 
synchronization signal. 
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20. (currently amended): The method of claim 19, further comprising the steps 

of: 

receiving a second third timing master synchronization signal from a third remote 
timing server; and 

synchronizing to said third remote timing server as timing master. 

21 . (currently amended): The method of claim 20, further comprising the step of 
said local timing server ceasing to transmit the replacement timing master 
synchronization signal. 

22. (currently amended): The method of claim 19, wherein if two timing master 
signals from said second and third remote timing servers are received for more than a 
predetermined amount of time, the method further comprising the steps of: 

counting toward said unique constant; and 

synchronizing to a fourth remote timing server as timing master if a fourth m aster 
timing synchronization signal is received from said fourth remote timing server during the 
counting step and otherwise transmitting [[a]] the replacement timing master 
synchronization signal. 

23. (currently amended): The method of claim 19, wherein if the first or second 
[[a]] timing master synchronization signal is no longer being received, the method farther 
comprises the step of counting further comprising the steps of operating said local timing 
server automatically and independently until said synchronizing step. 

24. (original): The method of claim 1 9, further comprising the steps of: 
monitoring the synchronization signal from each timing server; and 
determining failure of timing synchronization signals from remote timing servers 

based at least in part on the step of monitoring. 

7 



PAGE 8(14 ' RCVD AT 121(12006 5:08:21 PM [Eastern Standard Time] * SVR:USPTOEFXRF-3/7 * DNIS:2738300 * CSO:480385S061 1 DURATION (mm-ss):04-16 



'Dec. 6. 2006 2:58PM INGRASSIA FISHER & LOR E NZ PC No. 5431 P. 9 

Appl. No. 10/692,972 

Amdt Dated December 6, 2006 

Reply to Office Action of September 6, 2006 

25. (currently amended): The method of claim 24, further comprising the steps 

of: 

comparing an actual time of arrival of [[a]] the first synchronization signal to the 
designed time of arrival of the first synchronization signal and to a predetermined 
tolerance; and 

determining that the timing server has failed if a difference between the actual 
time of arrival of the first synchronization signal and the designed time of arrival of the 
first synchronization signal exceeds the predetermined tolerance. 

26* (currently amended): The method of claim 25, further comprising the steps 

of: 

measuring a temporal gap between the time of arrival of said first synchronization 
signal and the termination time of a prior [[, second]] synchronization signal; and 

determining whether the first synchronization signal or the [[second]] prior 
synchronization signal has failed based, at least in part, on the size of said gap. 

27. (original): The method of claim 26, further comprising the steps of: 
monitoring timing, parameters of the local timing server to determine internal 

timing integrity; and 

determining failure of said local timing server based at least in part on the step of 
monitoring timing parameters of the local timing server. 

28. (original): The method of claim 27, wherein each tuning server is designed to 
produce a frame tick periodically to within a frame tick tolerance, the step of monitoring 
further comprising the steps of: 

. comparing an actual frame tick period with the designed frame tick period and 
said frame tick tolerance; and 

determining that said timing server has failed If a difference between the actual 
frame tick period and the designed frame tick period exceeds the frame tick tolerance. 
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29. (currently amended): A computer-readable media, p rogram product, 
comprising: 

A) a set of instructions executable by a timing server to automatically and 

independently select a timing master from among a plurality of identically instructed 
timing servers coupled to at least one bus in a synchronous data bus system, wherein said 
selection is made based upon time synchronization signals received by said timing server 
and further based upon a constant unique to each said timing server^asd 

A) signal bearing media bearing th e set of instructions 

the set of instructions further initiating a counter to count toward the unique 
constant in response to detection of a failure of a received timing master synchronization 
signal to which said each timing server is synchronized: if no other timing master 
synchronization signal is received before said counting reaches said un ique cnnstant 1 
transmitting a replacement timing master synchronization signal: if the other timing 
master synchro nization signal is received before said counting reaches said unique 
predetermined value, sync hmni^np tn the other timing master synchronization signal . 

30. (currently amended): The program product computer-readable media of 
claim 29, wherein said set of instructions signal bearing media comprises is stored in a 
memory in a timing server. 
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